3 ms·
CA changes can happen due to many legitimate regions. Pinning certificates in this way doesn’t scale, as we saw with the deprecation of HPKP.
by supriyo-biswas 3y ago
CA changes can happen due to many legitimate regions. Pinning certificates in this way doesn’t scale, as we saw with the deprecation of HPKP.
- Jensson 3y agoAll you need is a list of trusted CA's, like we do right now, and then issue a warning if it isn't on that list. It is a very simple plugin to make.
- g-b-r 3y agoThese certificate authories will also issue legitimate certificates btw, the regulation explicitly encourages local states to use them for their services